$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: LoMtivK2Jo/bMnctT6xhiOGjGsygmE56zu5r8XCl0R4= Subject key identifier: 31:C3:38:AB:D3:98:0B:9E:51:15:47:75:D9:FE:76:34:28:8E:80:08 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: C6 Signing time: Fri 25 Apr 2025 04:57:40 +0000 Manifest this update: Fri 25 Apr 2025 04:57:40 +0000 Manifest next update: Fri 02 May 2025 04:57:40 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: u4AVjU5PI1G0hi+UlQkCLaTTqWu5p4Sr3vGZxJi1KrE=) 2: 62B87A26895B11EFBA2A3B22C4F9AE02.roa (hash: GkfnFa85sf2ihLyLByQY01IPDXpueRzZ4fB3mmtkqLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Apr 25 04:57:40 2025 GMT Not After : May 2 04:57:40 2025 GMT Subject: CN=680b1644-c857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:d9:5e:43:f8:44:ec:a5:d2:97:5d:44:63: da:6d:1d:8a:e2:4d:81:d2:6a:cf:0d:dd:94:87:a0: 50:b4:25:bc:30:37:3d:fc:31:8a:fd:dc:93:94:8e: 1a:62:e0:39:e0:90:de:57:d5:96:7e:3f:47:2f:79: b4:d0:c5:2f:18:ca:9b:58:74:71:90:91:47:b4:24: 59:3e:d1:cc:38:ce:f4:39:18:4a:16:3d:4b:01:d4: 0a:bc:18:e8:1e:85:9e:21:a6:13:67:20:0f:54:42: f8:f8:d1:5e:6d:c8:38:42:12:77:4e:9b:be:89:1c: 41:e3:98:5f:c0:fe:65:f3:d2:1d:8d:86:32:45:17: bd:17:4c:bf:4a:af:5c:98:58:38:d8:c7:09:a8:cb: 5c:1f:20:cc:fa:a0:9d:1c:4b:08:c1:fa:bb:a7:c3: f2:42:28:c6:aa:09:f3:8e:ee:96:b0:4e:57:fd:cc: e9:c5:da:5e:06:90:3c:43:35:9f:7b:60:0a:17:5c: fc:13:0b:99:90:45:ee:d2:74:f8:31:80:57:f4:b1: b6:8e:13:41:43:6b:82:11:0a:b3:2b:ef:a2:c6:19: 55:0d:1a:57:e0:24:14:bc:5e:26:5a:7a:9c:0e:08: f4:e8:a8:fb:cb:59:54:7d:6c:81:96:94:72:5d:c1: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:38:AB:D3:98:0B:9E:51:15:47:75:D9:FE:76:34:28:8E:80:08 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:44:7f:8a:06:52:a5:ea:6c:50:4f:30:b5:c3:d7:79:89: f5:a2:02:bd:e6:8e:c7:72:5b:d2:18:13:dc:f9:af:e1:68:fb: 74:88:0f:9b:f7:f2:52:1e:34:52:36:c8:6b:4d:bd:76:e0:8f: e2:cd:6d:f0:4f:ba:7c:13:e2:6b:34:5c:91:fe:e5:61:2b:02: 69:24:74:fd:45:56:69:52:cf:f0:d3:b5:c0:fa:49:77:c2:4b: 85:0f:15:06:ac:da:01:ab:33:32:95:41:80:e1:41:b8:bb:8d: 98:07:94:f1:e8:b1:83:a1:98:38:d5:2c:10:0e:f4:fd:02:8c: be:c7:ad:ff:ae:df:1d:72:5c:5e:d5:d9:78:f7:91:61:33:39: c3:d7:74:5c:88:c8:f2:b2:fe:6a:fd:0c:59:2e:58:fa:d7:64: 7c:81:54:4e:1e:70:0d:f6:74:7a:f8:fc:c2:f0:01:93:da:79: cd:57:e5:4c:48:fd:cb:9b:52:1f:d7:40:aa:53:39:96:2d:ec: 1e:47:e7:2d:72:03:c2:75:12:ad:d7:2e:96:cf:10:95:ec:6f: 31:8e:6f:1a:f0:d7:11:d2:2c:38:a0:6f:27:24:50:ec:4a:47: f5:db:0c:ab:ce:34:53:e6:a7:b3:4b:2c:fc:91:02:81:dd:52: 93:3d:44:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjUwNDI1MDQ1NzQwWhcNMjUwNTAyMDQ1NzQwWjAYMRYwFAYD VQQDEw02ODBiMTY0NC1jODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywnZXkP4ROyl0pddRGPabR2K4k2B0mrPDd2Uh6BQtCW8MDc9/DGK/dyTlI4a YuA54JDeV9WWfj9HL3m00MUvGMqbWHRxkJFHtCRZPtHMOM70ORhKFj1LAdQKvBjo HoWeIaYTZyAPVEL4+NFebcg4QhJ3Tpu+iRxB45hfwP5l89IdjYYyRRe9F0y/Sq9c mFg42McJqMtcHyDM+qCdHEsIwfq7p8PyQijGqgnzju6WsE5X/czpxdpeBpA8QzWf e2AKF1z8EwuZkEXu0nT4MYBX9LG2jhNBQ2uCEQqzK++ixhlVDRpX4CQUvF4mWnqc Dgj06Kj7y1lUfWyBlpRyXcHMRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHDOKvT mAueURVHddn+djQojoAIMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsbER/igZSpepsUE8wtcPXeYn1ogK95o7HclvSGBPc+a/haPt0iA+b 9/JSHjRSNshrTb124I/izW3wT7p8E+JrNFyR/uVhKwJpJHT9RVZpUs/w07XA+kl3 wkuFDxUGrNoBqzMylUGA4UG4u42YB5Tx6LGDoZg41SwQDvT9Aoy+x63/rt8dclxe 1dl495FhMznD13RciMjysv5q/QxZLlj612R8gVROHnAN9nR6+PzC8AGT2nnNV+VM SP3Lm1If10CqUzmWLeweR+ctcgPCdRKt1y6WzxCV7G8xjm8a8NcR0iw4oG8nJFDs Skf12wyrzjRT5qezSyz8kQKB3VKTPUTJ -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:14 2025 by rpki-client